General
-
Target
JaffaCakes118_cf327d6a5937d13337a674221cdc0d8bd7eadb425f465a056aeeeee9c9409c83
-
Size
188KB
-
MD5
4b63556cbec8694c87098b450b5c7b77
-
SHA1
ff3b4f7ed0895d7e2c5e2cb24c76095e492be820
-
SHA256
cf327d6a5937d13337a674221cdc0d8bd7eadb425f465a056aeeeee9c9409c83
-
SHA512
40e9a8bcecfc247852581152c7e425d06563d82661cd47806d98630e9a94c336a4aeb1fc9a383ecc83be724087b6c0dd3ae96506407d8245477905c03be1fe65
-
SSDEEP
3072:D6T75sk1JkPns93bcRAHqv3/Muy1QMvVYvgRpGj7jgSpefAlv:+5rrxbwEqv3/JMddpqifAl
Malware Config
Extracted
formbook
4.1
g9s4
visitmechanic.com
xn--kck4a7gpd474vx6i.com
prozdorovie.online
omatpupa.xyz
zamokwakhekhumalo.com
mayuraandchris.com
wanasahstore.com
bicicletas.win
yhdm61.com
mortgageattract.com
centuryofbio.com
xtdkgjt.com
nhahangnetnghe.com
whatsappsemcontato.com
onlinemarketing-teamwebus.com
zuevu.com
dancaronmusic.com
tingseo.com
uniflapline.com
setuppharmaweb.online
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_cf327d6a5937d13337a674221cdc0d8bd7eadb425f465a056aeeeee9c9409c83
Headers
Sections